Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: fppgBtqmZSDtt5IdDfJRUv/nrKFwORLOLaRSQiQiwfo=
Subject key identifier: 90:DD:CA:74:D8:9B:3F:02:AE:5D:12:2F:2F:EA:05:BB:78:89:E2:55
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 019F951280A1840155AB933375AAECD49663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 17:00:45 +0000
Manifest this update: Fri 24 Jul 2026 17:00:45 +0000
Manifest next update: Sat 25 Jul 2026 17:00:45 +0000
Files and hashes: 1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: LqX1OWoskUUhc7EG3AzSW9fe+qQfMZcfnrSC8KH7B3M=)
3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:80:a1:84:01:55:ab:93:33:75:aa:ec:d4:96:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Jul 24 17:00:45 2026 GMT
Not After : Jul 25 17:00:45 2026 GMT
Subject: CN=90ddca74d89b3f02ae5d122f2fea05bb7889e255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:95:12:f5:e9:a1:48:34:ba:ef:4c:c1:d3:
15:c8:69:63:5d:46:d1:68:b1:2f:c4:b3:27:44:c6:
a2:a4:56:ca:97:5c:ea:a5:c4:6d:09:5d:f2:a6:8d:
7d:b6:16:9b:de:5c:05:c1:a8:f8:80:62:73:81:b4:
ea:b6:e8:7a:c2:1e:e9:e9:50:bd:3d:93:24:f5:b1:
98:fe:bb:66:01:47:b5:70:82:47:5c:72:86:98:ae:
9b:34:92:d2:88:61:8b:8c:2a:5a:85:37:74:8d:7f:
8a:0e:42:6e:a0:97:31:73:8d:ad:30:0a:c5:c1:17:
c3:fb:f0:20:cb:c5:c3:6b:f2:cc:5c:52:a5:2f:98:
11:bc:b9:ad:c7:fe:fc:73:86:0e:41:6d:61:62:42:
2a:a2:81:63:1e:2e:26:6f:6b:4d:7c:4b:68:37:f8:
fd:03:47:cb:c3:b3:a3:b8:8d:a9:a7:37:ba:8e:ee:
b3:e3:a6:83:69:84:96:96:0f:89:f2:48:80:23:f0:
2d:ff:9f:71:21:fc:a3:9e:66:7b:f7:d2:c3:04:a0:
a5:88:57:57:b8:d4:5b:46:e8:f2:87:55:59:68:a0:
59:bb:e4:95:d0:86:f2:0f:63:07:3f:62:36:c5:44:
28:37:28:19:01:3c:6c:6d:cb:d1:22:e2:ff:09:07:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DD:CA:74:D8:9B:3F:02:AE:5D:12:2F:2F:EA:05:BB:78:89:E2:55
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f7:d8:ea:9c:13:a2:0a:f5:e6:46:55:da:84:ed:92:da:59:
ef:2d:29:e5:03:f2:76:09:7f:be:ae:36:f6:75:64:0e:c7:1b:
d9:5c:13:5b:ca:18:d1:5f:20:f0:79:89:95:94:ce:63:c8:50:
e1:6b:46:e5:f7:ac:ee:09:f1:35:cb:65:fa:0e:1b:c5:f2:1d:
88:84:43:55:16:de:a0:d1:51:dd:fa:de:f6:6f:d2:57:6c:08:
33:52:5b:6a:3d:3d:4c:0a:f0:83:be:b7:22:19:f6:10:4c:6b:
58:0e:1a:77:b0:d1:7b:93:3e:44:42:d6:fe:af:8c:41:cc:1e:
e6:8c:a8:b8:74:c9:40:be:77:d2:78:56:03:8f:48:f2:09:c6:
f9:71:57:aa:d8:9a:35:35:ee:fa:52:69:e5:ea:2e:12:f6:75:
f0:8e:e2:62:61:52:0b:51:d0:8f:e3:01:61:6e:ba:8f:26:c5:
57:33:40:08:1f:d4:f3:d6:7c:f1:99:54:de:7c:73:32:81:78:
f6:6c:80:58:4f:49:7a:bc:2c:c8:52:76:95:1a:0d:9e:01:4c:
d2:16:31:2b:61:60:bf:24:c6:1c:d4:d1:b1:4c:41:e3:ad:bf:
36:e0:84:3e:af:b0:e1:6f:7c:04:c5:cc:f5:7f:15:ff:d4:c7:
bb:56:b2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:38:59 2026 by rpki-client